VPN on MAC issue vs. Windows Machines

[it_ib]

Hi together,
we have configured the mobile client VPN as IKEv2 and Auth with Mutual Certificate.
We also have imported our Active-Directory CA to the PFsense.

When a Windows machine connects, the PF is checking the Machine-Certificate, realizing that the issuer is our CA and gets the RSA Public Key and authorizes the machine to connect.

On a MAC, we use JAMF Pro and its Active Directory Certificate Services Connector to request the same certificate from our CA, what actually works.
But when the MAC connects, I get a log on the PF "no trusted RSA public key found for <machinename>".

I currently don't understand what makes the difference.
If I lookup the certificate on the MAC in the keychain, everything looks good!

Maybe someone here could help.
Thanks!